Messages

Hello all,

I have a new installation of OPNsense 25.1 and have also run into this issue while attempted to update except in this case to 25.1.3.

OPNsense is running as a Proxmox Virtual Machine using the community repositories and ZFS filesystem.

Mirrors attempted - OPNsense, University of Kent and TerraHost (this repository appears to be broken)

Output of upgrade attempt:

Code Select Expand

***GOT REQUEST TO UPDATE***
Currently running OPNsense 25.1 (amd64) at Sun Mar 23 11:04:49 GMT 2025
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (156 candidates): .......... done
Processing candidates (156 candidates): .... done
The following 57 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
boost-libs: 1.86.0_1 -> 1.87.0_1
ca_root_nss: 3.104 -> 3.108
curl: 8.11.1_1 -> 8.12.1
dnsmasq: 2.90_4,1 -> 2.90_5,1
easy-rsa: 3.2.1_1,1 -> 3.2.2,1
icu: 74.2_1,1 -> 76.1,1
indexinfo: 0.3.1 -> 0.3.1_1
krb5: 1.21.3 -> 1.21.3_1
libpsl: 0.21.5_1 -> 0.21.5_2
libunistring: 1.2 -> 1.3
lighttpd: 1.4.77 -> 1.4.77_1
monit: 5.34.3 -> 5.34.4
mpd5: 5.9_18 -> 5.9_19
nss: 3.107 -> 3.109
ntp: 4.2.8p18_1 -> 4.2.8p18_4
openldap26-client: 2.6.9 -> 2.6.9_1
openssh-portable: 9.9.p1_1,1 -> 9.9.p2_1,1
openssl: 3.0.15_1,1 -> 3.0.16,1
opnsense: 25.1 -> 25.1.3
opnsense-update: 25.1 -> 25.1.3
pcre2: 10.43 -> 10.45
pftop: 0.10_1 -> 0.12
php83: 8.3.15 -> 8.3.17_1
php83-ctype: 8.3.15 -> 8.3.17_1
php83-curl: 8.3.15 -> 8.3.17_1
php83-dom: 8.3.15 -> 8.3.17_1
php83-filter: 8.3.15 -> 8.3.17_1
php83-gettext: 8.3.15 -> 8.3.17_1
php83-ldap: 8.3.15 -> 8.3.17_1
php83-mbstring: 8.3.15 -> 8.3.17_1
php83-pcntl: 8.3.15 -> 8.3.17_1
php83-pdo: 8.3.15 -> 8.3.17_1
php83-session: 8.3.15 -> 8.3.17_1
php83-simplexml: 8.3.15 -> 8.3.17_1
php83-sockets: 8.3.15 -> 8.3.17_1
php83-sqlite3: 8.3.15 -> 8.3.17_1
php83-xml: 8.3.15 -> 8.3.17_1
php83-zlib: 8.3.15 -> 8.3.17_1
py311-Babel: 2.16.0 -> 2.17.0
py311-Jinja2: 3.1.4 -> 3.1.6
py311-anyio: 4.7.0 -> 4.8.0
py311-attrs: 24.3.0 -> 25.1.0
py311-certifi: 2024.12.14 -> 2025.1.31
py311-cryptography: 42.0.8_5,1 -> 42.0.8_7,1
py311-duckdb: 1.1.3 -> 1.2.0
py311-numpy: 1.26.4_2,1 -> 1.26.4_5,1
py311-pyasn1-modules: 0.4.0 -> 0.4.1
py311-pylsqpack: 0.3.18 -> 0.3.19
py311-trio: 0.28.0 -> 0.29.0
py311-truststore: 0.10.0 -> 0.10.1
py311-tzdata: 2024.2 -> 2025.1
sqlite3: 3.46.1,1 -> 3.46.1_1,1
suricata: 7.0.8 -> 7.0.8_2
syslog-ng: 4.8.1_3 -> 4.8.1_5
zstd: 1.5.6 -> 1.5.7

Installed packages to be REINSTALLED:
kea-2.6.1_2 (required shared library changed)
sudo-1.9.16p2_1 (option removed: SSSD2)

Number of packages to be upgraded: 55
Number of packages to be reinstalled: 2

The process will require 23 MiB more space.
94 MiB to be downloaded.
[1/51] Fetching py311-numpy-1.26.4_5,1.pkg: ....... done
pkg-static: cached package py311-numpy-1.26.4_5,1: missing or size mismatch, fetching from remote
[2/51] Fetching py311-numpy-1.26.4_5,1.pkg: ...... done
pkg-static: cached package py311-numpy-1.26.4_5,1: missing or size mismatch, cannot continue
Consider running 'pkg update -f'
Starting web GUI...done.
***DONE***
A Firmware Health Audit was performed with the following output:

Code Select Expand

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 25.1 (amd64) at Sun Mar 23 12:06:50 GMT 2025
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 25.1 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 25.1 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
>>> Check installed plugins
No plugins found.
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" at 25.1 has 69 dependencies to check.
Checking packages: ..
ca_root_nss-3.104 version mismatch, expected 3.108
Checking packages: .....
dnsmasq-2.90_4,1 version mismatch, expected 2.90_5,1
Checking packages: ...........
lighttpd-1.4.77 version mismatch, expected 1.4.77_1
Checking packages: .
monit-5.34.3 version mismatch, expected 5.34.4
Checking packages: .
mpd5-5.9_18 version mismatch, expected 5.9_19
Checking packages: .
ntp-4.2.8p18_1 version mismatch, expected 4.2.8p18_4
Checking packages: .
openssh-portable-9.9.p1_1,1 version mismatch, expected 9.9.p2_1,1
Checking packages: ..
opnsense-25.1 version mismatch, expected 25.1.3
Checking packages: ...
opnsense-update-25.1 version mismatch, expected 25.1.3
Checking packages: ..
pftop-0.10_1 version mismatch, expected 0.12
Checking packages: .
php83-ctype-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-curl-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-dom-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-filter-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-gettext-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: ..
php83-ldap-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-pcntl-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-pdo-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .....
php83-session-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-simplexml-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-sockets-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-sqlite3-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-xml-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: .
php83-zlib-8.3.15 version mismatch, expected 8.3.17_1
Checking packages: ..
py311-Jinja2-3.1.4 version mismatch, expected 3.1.6
Checking packages: ..
py311-duckdb-1.1.3 version mismatch, expected 1.2.0
Checking packages: ...
py311-numpy-1.26.4_2,1 version mismatch, expected 1.26.4_5,1
Checking packages: ...........
suricata-7.0.8 version mismatch, expected 7.0.8_2
Checking packages: .
syslog-ng-4.8.1_3 version mismatch, expected 4.8.1_5
Checking packages: ... done
***DONE***
I have also performed the steps suggested in this thread. Reinstalled pkg and opnsense-update. A reboot does not clear the problem. Clearing the cache does not reveal errors, and pkg clean.

The contents of the cache after an attempt to upgrade:

Code Select Expand

root@OPNsense:~ # ls /var/cache/pkg/
lighttpd-1.4.77_1.pkg php83-curl-8.3.17_1~7a7cc654a4.pkg
lighttpd-1.4.77_1~5fae8d6eb7.pkg php83-filter-8.3.17_1.pkg
opnsense-update-25.1.3.pkg php83-filter-8.3.17_1~5679cb6edc.pkg
opnsense-update-25.1.3~ea2655dcb9.pkg py311-anyio-4.8.0.pkg
php83-curl-8.3.17_1.pkg py311-anyio-4.8.0~88dc8a0c5e.pkg

I note that the failing packages have something in common.

Code Select Expand

...
[1/93] Fetching py311-pandas-2.1.4,1.pkg: ......... done
pkg-static: cached package py311-pandas-2.1.4,1: missing or size mismatch, fetching from remote
[2/93] Fetching py311-pandas-2.1.4,1.pkg: ........ done
pkg-static: cached package py311-pandas-2.1.4,1: missing or size mismatch, cannot continue
...
***DONE***


Code Select Expand

Default mirror:-
...
[7/57] Fetching py311-numpy-1.26.4_5,1.pkg: ...... done
pkg-static: cached package py311-numpy-1.26.4_5,1: missing or size mismatch, fetching from remote
[8/57] Fetching py311-numpy-1.26.4_5,1.pkg: ...... done
pkg-static: cached package py311-numpy-1.26.4_5,1: missing or size mismatch, cannot continue

Code Select Expand

New York Mirror:-
...
[11/51] Fetching icu-76.1,1.pkg: ....... done
pkg-static: cached package icu-76.1,1: missing or size mismatch, fetching from remote
[12/51] Fetching icu-76.1,1.pkg: ...... done
pkg-static: cached package icu-76.1,1: missing or size mismatch, cannot continue

 and my own:

Code Select Expand

[1/51] Fetching py311-numpy-1.26.4_5,1.pkg: ....... done
pkg-static: cached package py311-numpy-1.26.4_5,1: missing or size mismatch, fetching from remote
[2/51] Fetching py311-numpy-1.26.4_5,1.pkg: ...... done
pkg-static: cached package py311-numpy-1.26.4_5,1: missing or size mismatch, cannot continue
all failing filenames contain a comma, not the expected dot.

Could this be as simple as a locale issue on one of the machines involved in the repositories replacing the dot? ie while compiling a filename list.